Mailing List Archive

https://bugs.exim.org/show_bug.cgi?id=2706

Bug ID: 2706
Summary: DKIM and Received headers
Product: Exim
Version: 4.94
Hardware: x86-64
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: DKIM
Assignee: tom@duncanthrax.net
Reporter: bd4@protva.ru
CC: exim-dev@exim.org

When Exim is asked to sign "Received:" headers (via dkim_sign_headers
contining "+Received") it produces a signature, which always passes
exim's verification check, but does not pass Postfix and SpamAssassin.

For Exim confirmation is visible from log file entry "DKIM: d=...
s=... c=relaxed/relaxed a=rsa-sha256 b=2048 [verification succeeded]"
and ${authresults{}} expansion string.

For Postix I rely on https://dkimvalidator.com/ public service,
for SpamAssassin I have my own installaton and can compare with
dkimvalidator.com, both show identical results.
I also tried https://www.appmaildev.com/en/dkimfile, it agrees with
dkimvalidator.com.

If "+Received" is removed from dkim_sign_headers, all mentioned checkers
report good result.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##